Lucene search

MitreCVE-2015-6932

HistorySep 18, 2015 - 10:59 p.m.

CVE-2015-6932

2015-09-1822:59:09

CWE-310

mitre

web.nvd.nist.gov

vmware

vcenter

server

tls

ldap

certificate

verification

security

vulnerability

nvd

cve-2015-6932

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

5.9

Confidence

Low

EPSS

0.001

Percentile

29.4%

JSON

VMware vCenter Server 5.5 before u3 and 6.0 before u1 does not verify X.509 certificates from TLS LDAP servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Affected configurations

Nvd

Node

vmwarevcenter_serverMatch5.5-

vmwarevcenter_serverMatch5.51

vmwarevcenter_serverMatch5.51a

vmwarevcenter_serverMatch5.51b

vmwarevcenter_serverMatch5.51c

vmwarevcenter_serverMatch5.52

vmwarevcenter_serverMatch5.52b

vmwarevcenter_serverMatch5.52d

vmwarevcenter_serverMatch5.52e

vmwarevcenter_serverMatch6.0-

vmwarevcenter_serverMatch6.0a

vmwarevcenter_serverMatch6.0b

VendorProductVersionCPE
vmwarevcenter_server5.5cpe:2.3:a:vmware:vcenter_server:5.5:-:*:*:*:*:*:*
vmwarevcenter_server5.5cpe:2.3:a:vmware:vcenter_server:5.5:1:*:*:*:*:*:*
vmwarevcenter_server5.5cpe:2.3:a:vmware:vcenter_server:5.5:1a:*:*:*:*:*:*
vmwarevcenter_server5.5cpe:2.3:a:vmware:vcenter_server:5.5:1b:*:*:*:*:*:*
vmwarevcenter_server5.5cpe:2.3:a:vmware:vcenter_server:5.5:1c:*:*:*:*:*:*
vmwarevcenter_server5.5cpe:2.3:a:vmware:vcenter_server:5.5:2:*:*:*:*:*:*
vmwarevcenter_server5.5cpe:2.3:a:vmware:vcenter_server:5.5:2b:*:*:*:*:*:*
vmwarevcenter_server5.5cpe:2.3:a:vmware:vcenter_server:5.5:2d:*:*:*:*:*:*
vmwarevcenter_server5.5cpe:2.3:a:vmware:vcenter_server:5.5:2e:*:*:*:*:*:*
vmwarevcenter_server6.0cpe:2.3:a:vmware:vcenter_server:6.0:-:*:*:*:*:*:*

Vendor	Product	Version	CPE
vmware	vcenter_server	5.5	cpe:2.3:a:vmware:vcenter_server:5.5:-::::::
vmware	vcenter_server	5.5	cpe:2.3:a:vmware:vcenter_server:5.5:1::::::
vmware	vcenter_server	5.5	cpe:2.3:a:vmware:vcenter_server:5.5:1a::::::
vmware	vcenter_server	5.5	cpe:2.3:a:vmware:vcenter_server:5.5:1b::::::
vmware	vcenter_server	5.5	cpe:2.3:a:vmware:vcenter_server:5.5:1c::::::
vmware	vcenter_server	5.5	cpe:2.3:a:vmware:vcenter_server:5.5:2::::::
vmware	vcenter_server	5.5	cpe:2.3:a:vmware:vcenter_server:5.5:2b::::::
vmware	vcenter_server	5.5	cpe:2.3:a:vmware:vcenter_server:5.5:2d::::::
vmware	vcenter_server	5.5	cpe:2.3:a:vmware:vcenter_server:5.5:2e::::::
vmware	vcenter_server	6.0	cpe:2.3:a:vmware:vcenter_server:6.0:-::::::